18.5.2. Procedure – Authorizing connections to the target hosts with a PSM plugin

Purpose: 

To configure PSM to use an Authentication and Authorization plugin before accessing the target host, complete the following steps.

Prerequisites: 

Steps: 

  1. To upload the custom plugin you received, navigate to Basic Settings > Plugins, browse for the file and click Upload. Note that it is not possible to upload or delete plugins if PSM is in sealed mode.

    Your plugin .zip file may contain an optional sample configuration file. This file serves to provide an example configuration that you can use as a basis for customization if you wish to adapt the plugin to your site's needs.

  2. If your plugin supports configuration, then you can create multiple customized configuration instances of the plugin for your site. Create an instance by completing the following steps:

    1. Go to Policies > AA Plugin Configurations. Select the plugin to use from the Plugin list.

    2. The Configuration textbox displays the example configuration of the plugin you selected. You can edit the configuration here if you wish to create a customized instance of the plugin.

      Note

      Plugins created and issued before the release of PSM 5 F1 do not support configuration. If you create a configuration for a plugin that does not support this, the affected connection will stop with an error message.

      Figure 18.19. Policies > AA Plugin Configurations — Creating a customized plugin configuration instance

      Policies > AA Plugin Configurations — Creating a customized plugin configuration instance
  3. Navigate to the Connection policy where you want to use the plugin (for example, to RDP Control > Connections), select the plugin configuration instance to use in the AA plugin field, then click .

  4. If the plugin sets or overrides the gateway username of the connection, configure a Usermapping policy and use it in the Connection policy. For details, see Procedure 18.1, Configuring usermapping policies.

  5. Verify that the configuration works properly: try to establish a test connection. For details, see Procedure 18.5.4, Performing authentication with AA plugin in Remote Desktop connections. If the plugin is configured to store any metadata about the connection, these data will be available in the Additional metadata field of the PSM Search interface.